Cyber Security
CitySoft NetCloud Consulting Services
CitySoft NetCloud (NetCloud) offer small to medium sized enterprises (SMEs) & mature established small to mid-sized businesses (SMBs) infrastructure and security advice to help companies defend against cyber criminals. We implement systems such as Sophos, Watchguard, Keeper Security, 2FA, & Crowdstrike. NetCloud will help you strengthen your network defenses against common exploited weak security controls and practices.
Cloud Security Partners
To help protect our client’s business critical data, our private Cloud infrastructure is located at a tier IV DC. Our entry-level Cloud service offering incorporates quality security measures with advanced plans offering companies even greater layers of security to suit their needs.
NetCloud partners with the industry leading security products and applies industry leading best practices to our client Cloud offerings. Our security partner products are regularly reviewed to ensure NetCloud’s use of the best available technologies.
Our Cloud services include immutable back-ups and storage at a remote site, and data encryption.
Managed Service Provider (MSP)
NetCloud offer maintenance, security and back-up solutions to clients, delivered under an MPS engagement. Our service includes 24/7 system monitoring, license renewal management and provision for system updates particularly related to security alerts
Cyber security
Most owners and managers of small to medium sized businesses SMBs & SMEs are now aware of the threat posed by cyber-criminals. The attitude of no one would be interested in my business has pretty much ceased to exist as companies of all sized and shapes have suffered from cyber-crime.
Make no mistake, ransomware attacks, brute force attacks, and crypto-virus extortion are commonplace and sophisticated, with the victims typically companies who have failed to implement measures to reduce the risk of becoming a victim of a cyber-attack.
Cyber criminals will find businesses with weak security policies and protocols making it an imperative that businesses introduce a suite of security measures to protect their information and to reduce the risk of business disruption as a result of an attack. Even where security measures exist to deny brute force attacks, for instance persistent brute force attacks will consume server resources degrading user experience and system speed causing business disruption.
Cyber criminals routinely exploit poor security configurations (either misconfigured or left unsecured), weak controls, and other poor cyber hygiene practices to gain initial access or as part of other tactics to compromise a victim’s system.
Malicious actors commonly use the following techniques to gain initial access to victim networks –
- By exploiting Public-Facing Applications
- Via External Remote services
- Phishing
- A Trusted relationship
- Valid Accounts
Malicious cyber actors often exploit the following common weak security controls, poor configurations, and poor security practices to employ the initial access techniques.
- Multifactor authentication (MFA) is not enforced
- Incorrectly applied privileges or permissions and errors within access control lists.
- Software is not up to date
- Use of vendor-supplied default configurations or default login usernames and passwords
- Remote services, such as a virtual private network (VPN), lack sufficient controls to prevent unauthorized access.
- Strong password policies are not implemented.
- Cloud services are unprotected.
- Open ports and misconfigured services are exposed to the internet.
- Failure to detect or block phishing attempts.
- Poor endpoint detection and response
Need a Security Audit?
Critical Security Measures
Critical security measures include ensuring you have a properly configured firewall with egress and ingress traffic policies, with secured IPSec VPN connections. Reverse proxy, published Apps, and published Remote Desktop Services with double-layered authentication mechanism with Remote Gateway Services, in preference to remote desktop connections, also provide you with a heightened level of security to deter cyber criminals.
Protection
Group policy imposed complex passwords with 8 to 10 characters and web-based award-winning virus protection software will help shield your servers from attacks, with minimal CPU overload but with maximum protection against malware, viruses, root kit, Trojan, and ransomware infections.
Backup Solutions
CitySoft recommends clients run their servers behind a clustered firewall pool and use the latest industry leading virtualization platform with properly configured and customizable backup solutions. Backup solutions that provide cutting-edge “boot from the latest backup image”, should there be a system failure, can be brought back to business with an RTO of around 10 to 15 minutes. When maximum up-time is a must, a back-up strategy such as this is a business imperative.
Contact Us
Get in touch with CitySoft today
CitySoft's ERP Partners
